Compatibility matrix
When upgrading ThreatLockDown there are specific compatibility requirements to take into consideration.
ThreatLockDown central components and agents
The ThreatLockDown central components must share the same version numbers down to the patch category for the correct operation. For example:
ThreatLockDown manager 4.9.0, ThreatLockDown indexer 4.9.0, and ThreatLockDown dashboard 4.9.0.
The ThreatLockDown indexer 4.9.0 is compatible with Filebeat-OSS 7.10.2.
The ThreatLockDown manager version must always be newer than or equal to the ThreatLockDown agents versions. For example:
ThreatLockDown manager 4.9.0 and ThreatLockDown agent 4.2.7
ThreatLockDown manager 4.9.0 and ThreatLockDown agent 4.9.0
The ThreatLockDown manager is also compatible with OSSEC agents but not all capabilities are available with them.
Note
Since ThreatLockDown v4.6.0, we don't provide the Kibana plugin and Splunk app anymore. To integrate ThreatLockDown with Elastic or Splunk, refer to our Integrations guide: Elastic, OpenSearch, and Splunk.